Revision as of 17:46, 30 July 2016

Contents

VPN (Virtual Private Network) connection

C&CZ manages a VPN server, which makes it possible for all users to gain secure access to the network with their Science username and password. The computer at home (or anywhere on the Internet) becomes part of the campus network. In this way users can get access to services that are normally only accessible from computers on campus. The most common of such services are connecting to disk shares or to special servers.

OS X 10.7 Lion and higher: install strongSwan with "IKEv2 EAP (Username/Password)". The strongSwan App has a known problem. The current solution is, however, not very easy. We are investigaing a doable solution.

SSH SOCKS-Proxy to access journals (linux)

There is a convenient alternative to VPN or the UB proxy website described above
to access online journals from anywhere. With SSH
one can start a so called SOCKS Proxy-server, which can be used by web-browsers.

If your Science username (e.g. "peter") is different on your local username use:

ssh -D 8942 -l peter lilo.science.ru.nl

The -D flag starts "dynamic" application-level portforwarding. The port number
(here 8942) can be any number above 1024 and below 65536. If a port is already
in use by another process try a different number.

Chromium and Google Chrome can be called from the command line with the proxyserver option:

chromium-browser --proxyserver="socks5://localhost:8942"

If you now go to a journal website i.e., J. Chem. Phys.,
you should see "Your access is provided by: Universiteitsbibliotheek" and
you should have the same access as from within the Radboud University domain.

Run ssh in the background

With these flags:

ssh -f -N -D port

ssh will run in the background (-f) and only setup the
proxy server but not actually logon (-N).

Troubleshooting

The "netstat" command may be used to troubleshoot problems:

netstat -at

will show all active and non-active tcp sockets. In the above example you should
see something like: